{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3"}],"component":"qooxdoo","cve_ids":["CVE-2011-1714"],"ecosystem":"npm","epss":0.02608,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pchf-755w-jj6v","id":"tcs_01M5KG3BM5CZBSVZ15RM5SMXD0","modified_at":"2026-09-10T03:49:23.929252866Z","published_at":"2022-05-17T01:59:37Z","references":["https://osv.dev/vulnerability/GHSA-pchf-755w-jj6v","https://nvd.nist.gov/vuln/detail/CVE-2011-1714","https://exchange.xforce.ibmcloud.com/vulnerabilities/66574","https://web.archive.org/web/20110410180449/http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues","https://web.archive.org/web/20201207203617/http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html","https://web.archive.org/web/20201207203620/http://www.securityfocus.com/bid/47184","http://www.exploit-db.com/exploits/17127"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-pchf-755w-jj6v","url":"https://osv.dev/vulnerability/GHSA-pchf-755w-jj6v"}],"summary":"QooxDoo XSS in Callback Parameter"}